I would say yes.  What ports are open between the DMZ and Trusted?  This may
impact your ability to fully administer the forest.



Scott Morley
MCSE 2000/4.0, Exchange 2000/5.5, MCT, CCNA, CNE, CNI 
Senior Systems Engineer/Architect 
Global Messaging Services, Starwood Technology Center 
Starwood Hotels and Resorts, Worldwide
 
Phone: 781-348-7120
 
"The ships hung in the sky in much the same way that bricks don't.." -
Douglas Adams


-----Original Message-----
From: Frank Buechler [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 03, 2004 11:08 AM
To: ActiveDir (E-mail)
Subject: [ActiveDir] Moving Schema Master 


Good Morning Folks

I'm having a bit of a problem and I'm wondering if one of you fine people
can help me out. First, let me give you a outline of the structure here. I
have (2) 2000 servers, one in the DMZ (Exchange Server, our clients rely
heavily on OWA), and the other sitting in trusted. The Operations Master is
the server sitting on the inside, the Schema Master is the server sitting in
the DMZ. I have been called here to upgrade everything to 2003 Server.
Here's where I'm at:

I have placed a 2003 server (brand new box) on the network. This box is
currently sitting in trusted, but it will eventually be the new Exchange
server. I want to run ADPREP /FORESTPREP on the Schema Master to bring the
2003 server into the AD. Since I really don't want to take the Exchange
server off the network to do this, and since that box will be getting
demoted anyway, I thought I would move the Schema Master role to the server
currently sitting in trusted, and run ADPREP against it. However, when I
attempt to do this, I get an error; "The current FSMO holder could not be
contacted".

Does the Exchange server (Schema Master) need to come out of the DMZ?

TIA!

-Frank
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
This electronic message transmission contains information from the Company that may be 
proprietary, confidential and/or privileged.
The information is intended only for the use of the individual(s) or entity named 
above.  If you are not the intended recipient, be
aware that any disclosure, copying or distribution or use of the contents of this 
information is prohibited.  If you have received
this electronic transmission in error, please notify the sender immediately by 
replying to the address listed in the "From:" field.

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to